amon.so is a library that integrates with the PHP interpreter and intercepts and manipulates the system calls provided by libc6. It replace the execve() syscall with a custom function which does extra sanity checking in order to prevent that an attacker could execute arbitrary code on the system exploiting a vulnerability in a web-based application More here

No Response to “amon.so: Hijacking System Calls For Hardening PHP – Debian Lenny And Squeeze”
»